Standards, regulations & certifications

To help you with compliance and reporting, we share information, best practices, and easy access to documentation. Our products regularly undergo independent verification of security, privacy, and compliance controls, achieving certifications against global standards to earn your trust. We're constantly working to expand our coverage.

This site contains information about Google's certifications and compliance standards it satisfies as well as general information about certain region or sector-specific regulations.

EU Model Contract Clauses

In 2010, the European Commission approved model contract clauses as a means of complying with the requirements of the EU Data Protection Directive, which in May 2018, was replaced by the General Data Protection Regulation (GDPR). The effect of this decision is that, by incorporating certain provisions into a contract, personal data can flow in a compliant way from those subject to the Directive to cloud (and other) providers outside the EU or the European Economic Area ("EEA"). By adopting EU model contract clauses, providers outside the EU or the EEA can offer their customers an option for complying with the GDPR.

Google Cloud Platform gained confirmation of compliance from the European Union’s data protection authorities, acting collectively as the Article 29 Working Party, for our model contract clauses, affirming that our G Suite and Google Cloud Platform contractual commitments fully meet the requirements to legally frame transfers of data from the EU to the rest of the world, in accordance with the Data Protection Directive, which has now been replaced by the GDPR.